eCharge Hardy Barth
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| cPH2 / cPP2 charging stations | 7 | – | May 21, 2025 |
| cPH2 | 3 | – | May 22, 2025 |
| Salia PLCC | 2 | – | Sep 13, 2025 |
Exploited and recent CVEs
- CVE-2025-10371 eCharge Hardy Barth Salia PLCC api.php unrestricted upload 0.4%
- CVE-2025-5873 eCharge Hardy Barth Salia PLCC Web UI firmware.php unrestricted upload 0.3%
- CVE-2025-3883 eCharge Hardy Barth cPH2 index.php Command Injection Remote Code Execution Vulnerability 0.7%
- CVE-2025-3882 eCharge Hardy Barth cPH2 nwcheckexec.php dest Command Injection Remote Code Execution Vulnerability 0.7%
- CVE-2025-3881 eCharge Hardy Barth cPH2 check_req.php ntp Command Injection Remote Code Execution Vulnerability 0.7%
- CVE-2025-48417 Hard-Coded Certificate and Private Key for HTTPS Web Interface in eCharge Hardy Barth cPH2 / cPP2 charging stations 0.2%
- CVE-2025-48416 Backdoor Functionality via SSH in eCharge Hardy Barth cPH2 / cPP2 charging stations 0.6%
- CVE-2025-48415 Backdoor Functionality via USB Drive in eCharge Hardy Barth cPH2 / cPP2 charging stations 0.2%
- CVE-2025-48414 Hard-coded web interface credentials in eCharge Hardy Barth cPH2 / cPP2 charging stations 0.3%
- CVE-2025-48413 Hard-coded OS root credentials in eCharge Hardy Barth cPH2 / cPP2 charging stations 0.2%
- CVE-2025-27804 OS Command Injection Vulnerability in eCharge Hardy Barth cPH2 / cPP2 charging stations 1.0%
- CVE-2025-27803 Missing Authentication in eCharge Hardy Barth cPH2 / cPP2 charging stations 0.4%